摘要：#!/bin/sh/bin/netstat -na|grep ESTABLISHED|awk '{print $5}'|awk -F: '{print $1}'|sort|uniq -c|sort -rn|head -10|grep -v -E '192.168|127.0'|awk '{if ($2=null && $1>40) {print $2}}'>/tmp/dropipfori in $(cat /tmp/dropip)do /sbin/iptables -A INPUT -s $i -j D 阅读全文